Microsoft Researchers Show AI Agents Can Be Backdoored via Neuron Edits
AI agents
Microsoft researchers demonstrated that AI models can be backdoored by editing fewer than 10 rarely used neurons without retraining. This triggers malicious commands that connected AI agents can execute with their permissions.
why this severityResearch proof of concept demonstrated by researchers with no known real-world exploitation.
- first report
- 11 Nov 2026
- last update
- 13 Nov 2026
Timeline · 1
Sources · 3
News and write-ups
- 2026-11-11Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsThe Hacker News · thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html
- 2026-11-11Microsoft researchers demonstrate hidden backdoor technique for AI agentsHelp Net Security · helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus
Research and catalogues
- 2026-11-13Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI AgentsarXiv · arxiv.org/abs/2611.15118
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Supply chainAgent hijack
- severity
- 1 · Research / proof of concept
- targets
- Enterprise deployment, Open-weight model
- owasp llm top 10
- LLM03:2025 Supply ChainLLM06:2025 Excessive Agency
- dates
- happened 11 Nov 2026 · first reported 11 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-11-11 08:41Z · updated 2026-11-13 16:43Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Microsoft Researchers Show AI Agents Can Be Backdoored via Neuron Edits https://gcdradar.vercel.app/incidents/microsoft-researchers-show-ai-agents-can-be-backdoored-via-n · AIR-2026-1896 · live - Lane: Research - Severity: 1 (Research / proof of concept): Research proof of concept demonstrated by researchers with no known real-world exploitation. - Fix status: Fix status unknown - First reported: 2026-11-11 - AI role: Attack on AI - Products: AI agents ## Summary Microsoft researchers demonstrated that AI models can be backdoored by editing fewer than 10 rarely used neurons without retraining. This triggers malicious commands that connected AI agents can execute with their permissions. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-11: Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons (https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html) ## Sources - 2026-11-11 The Hacker News: Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html - 2026-11-11 Help Net Security: Microsoft researchers demonstrate hidden backdoor technique for AI agents https://helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus - 2026-11-13 arXiv: Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents https://arxiv.org/abs/2611.15118 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveKerkoporta: Injecting Structured-Output Backdoors in Reasoning Coding Agents
Research · since 3 Nov 2026
AI - closedSteering Vectors Steering for Safety, Hijacking for Profit: Trojan Threats in LLM Steering
Research · since 27 Oct 2026
AI - closedSEAL: Persistent Tool Poisoning Attack against LLM Agents
Research · since 20 Oct 2026
AI - closedopen-weight LLM Model-as-a-Trojan: Self-Activating Covert DNS Exfiltration in LLM Weights
Research · since 19 Oct 2026
AI - closedAI agents CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing
Patch now · Exploited · since 15 Oct 2026 · updated 16 Oct 2026
AI - closedGGUF Poisoned GGUF Templates Enable Inference-Time Supply Chain Attacks
Research · since Jun 2025 (approx.)
AI